NASA-AMMOS/slim#25: Functional GitHub Actions-based SCRUB (CodeQL) analysis... #11
Conversation
codeql.yml
Outdated
| branches: [main, develop] | ||
| pull_request: | ||
| # The branches below must be a subset of the branches above | ||
| branches: [develop] |
There was a problem hiding this comment.
This probably isn't necessary since this was already checked when pushed to branch develop? But not a huge deal.
There was a problem hiding this comment.
I was going for the auto-checks at PR time before it hits the branch, but yeah when it's merged/pushed it may run again. However, there could also be other changes by that time.
(Below is a similar sentiment...)
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
Purpose
Proposed Changes
codeql.yamlworkflow file that triggers on push and PRcodeql/codeql-config.yamlconfiguration for static code analysis and security scanningIssues
Testing